Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/3138382e3136342e3135342e302f32342d3234203d3e20313430313535.roa
File: 3138382e3136342e3135342e302f32342d3234203d3e20313430313535.roa (raw, json)
Hash identifier: SKKLu4A4mpMenKgoxVqSnWRzSAfDBzQ+lWs2FjhbU6k=
Subject key identifier: 34:BA:5D:D6:06:F8:E5:05:80:AF:AF:B2:ED:92:BC:88:90:C0:1A:78
Certificate issuer: /CN=8b9ba9adde9635777bf586fd493e14cd30f7c4ca
Certificate serial: 356370A9806F5806065C5A5EBB7A77F11E150939
Authority key identifier: 8B:9B:A9:AD:DE:96:35:77:7B:F5:86:FD:49:3E:14:CD:30:F7:C4:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i5uprd6WNXd79Yb9ST4UzTD3xMo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/3138382e3136342e3135342e302f32342d3234203d3e20313430313535.roa
Signing time: Thu 25 May 2023 12:25:52 +0000
ROA not before: Thu 25 May 2023 12:20:52 +0000
ROA not after: Thu 23 May 2024 12:25:52 +0000
asID: 140155
IP address blocks: 188.164.154.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:63:70:a9:80:6f:58:06:06:5c:5a:5e:bb:7a:77:f1:1e:15:09:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b9ba9adde9635777bf586fd493e14cd30f7c4ca
Validity
Not Before: May 25 12:20:52 2023 GMT
Not After : May 23 12:25:52 2024 GMT
Subject: CN=34BA5DD606F8E50580AFAFB2ED92BC8890C01A78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4f:cd:92:ac:67:72:b7:24:b2:34:b2:9c:46:
e4:39:1b:7f:90:42:7e:00:da:2d:4f:4c:3c:fe:a2:
44:9a:b4:a2:5a:76:87:91:24:04:82:fa:13:69:19:
79:56:0e:49:4f:1a:a7:08:7a:90:6e:c4:5b:f9:26:
fb:b6:77:e5:b6:df:74:d0:5a:a6:11:3e:f9:23:6f:
f7:c6:ef:72:80:a3:7b:90:ad:dd:51:98:e1:a4:02:
b5:3d:73:3b:2e:96:6b:dc:70:a4:57:7c:54:be:5c:
40:ea:56:73:72:5b:10:06:2d:ee:9e:ea:11:62:31:
cb:2b:06:df:11:ef:cd:30:4f:de:42:aa:4a:2d:04:
8b:e9:3d:ed:d7:8c:79:7b:42:61:ad:3d:18:a0:15:
97:60:99:e1:a8:94:50:a4:b9:a6:61:c8:48:8e:a2:
99:d2:32:c8:19:da:7a:1d:f3:ff:da:a4:e1:d9:07:
81:ae:b9:aa:72:66:3e:6f:15:5d:9e:6f:ba:05:98:
ff:80:d9:fe:4a:eb:ac:96:4f:c1:61:a2:ee:99:7e:
9f:1f:46:0b:d8:ed:d5:88:2d:d5:5e:7d:ad:2b:35:
1e:7d:37:cc:05:66:51:c8:11:73:dc:d9:9a:54:82:
ee:bb:de:d5:3e:74:fe:30:f5:c2:f7:69:86:ee:26:
93:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:BA:5D:D6:06:F8:E5:05:80:AF:AF:B2:ED:92:BC:88:90:C0:1A:78
X509v3 Authority Key Identifier:
keyid:8B:9B:A9:AD:DE:96:35:77:7B:F5:86:FD:49:3E:14:CD:30:F7:C4:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5uprd6WNXd79Yb9ST4UzTD3xMo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/3138382e3136342e3135342e302f32342d3234203d3e20313430313535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.164.154.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:a8:b6:47:71:ad:f5:6b:cd:fb:ee:a4:ca:c5:f9:e2:1c:3a:
75:46:22:dc:ae:19:ea:6c:ba:5f:fb:d7:60:20:b7:4e:05:89:
cc:81:6a:b0:d0:2e:25:50:89:22:f8:dc:68:52:3c:71:d4:75:
5c:bd:4e:fc:e8:b2:1c:32:3c:26:86:b8:0b:91:9f:77:a5:4e:
1a:d8:bb:bc:ec:ad:97:3c:3c:80:33:18:2e:74:14:2c:2c:f9:
40:bb:a9:e6:92:3d:82:59:a2:b2:cb:09:34:3f:2c:f4:c5:4b:
04:b2:14:27:5a:52:5c:60:2f:f6:99:03:a1:4f:da:56:19:36:
2f:17:8f:88:0e:2a:2d:9a:bf:b3:45:ae:8a:00:28:6c:d3:0c:
94:ac:4c:dd:00:da:6c:14:52:95:8a:39:d9:76:38:7e:b6:ba:
92:1c:79:09:ee:e8:fd:ba:eb:60:ae:48:83:68:14:40:46:c9:
e0:c1:2e:d7:3e:a2:82:bc:32:10:09:40:79:a6:1b:d9:c9:4f:
2e:29:f1:d3:43:d8:11:e5:df:d8:5d:53:44:5a:79:d6:39:8e:
26:a8:c0:60:3e:3f:92:ad:65:e8:c0:bd:17:fc:e3:a7:ba:34:
76:0b:aa:f2:98:d4:a5:48:fe:ce:e1:13:21:87:7c:7d:58:e6:
5f:dc:a4:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:17 2024 by rpki-client on console-fra.rpki-client.org